Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
34.31.96.184 has a threat confidence score of 83%. This IP address from United States (AS396982, Google LLC) has been observed in 5 honeypot sessions targeting REDIS protocols. Detected attack patterns include redis structured application secret harvesting. First observed on April 20, 2026, most recently active April 23, 2026.
Identifies structured extraction of high-value application configuration and credential material from a Redis datastore. The behavior includes keyspace enumeration, targeted TYPE inspection across configuration namespaces (cloud, database, encryption, JWT, mail, payment, VCS), and direct GET/HGETALL retrieval of secrets, API keys, feature flags, internal URLs, and user cache objects. This tightly grouped pattern reflects deliberate application-layer reconnaissance and credential harvesting following access to a Redis instance, indicating high-confidence data exposure and likely compromise of associated services.